UCAN Decentralize Auth

UCAN Decentralize Auth 🚀 Authorise Everything, Everywhere, All At Once ✊ github.com/ucan-wg

UCAN Decentralize Auth When speaking of computation, all too much emphasis is often placed on the [services] themselves. The fabric of a system is the dynamic reference graph. Mark Miller, An Ode to the Granovetter Diagram

UCAN Decentralize Auth Brooklyn Zelenka @expede github.com/expede

UCAN Decentralize Auth Brooklyn Zelenka @expede Cofounder & CTO at Fission discord.gg/fissioncodes @fission@plnetwork.xyz Might know a thing or two about UCAN github.com/ucan-wg PLT and distributed systems are my jam github.com/expede

UCAN Decentralize Auth Everywhere

UCAN Decentralize Auth Everywhere Far Edge Commons Cloud & Edge

UCAN Decentralize Auth Open Protocols Everywhere

UCAN Decentralize Auth Open Protocols Everywhere Compute ⚙ Data 💾 Auth 🎟

UCAN Decentralize Auth How to Power a New Internet 🔌

How to Power a New Internet 🔌 Adoption & Audience

How to Power a New Internet 🔌 DX & UX

How to Power a New Internet 🔌 DX & UX Web3 UX is too hard for many users

How to Power a New Internet 🔌 DX & UX P O Web3 UX is too hard for many users T S L L U F

How to Power a New Internet 🔌 Move the Needle

How to Power a New Internet 🔌 Move the Needle Realpolitik Easier, as secure, & more open than: OAuth, X.509, SAML, Macaroons, MetaMask, WalletConnect, etc

How to Power a New Internet 🔌 OAuth Sequence

How to Power a New Internet 🔌 UCAN Sequence 🕙

How to Power a New Internet 🔌 Project Approach

How to Power a New Internet 🔌 Project Approach Be a Trojan Horse Build on widely supported, familiar, well-understood standards & tools

How to Power a New Internet 🔌 Tools For Mere Mortals

UCAN Decentralize Auth Case Study: IPNS

UCAN Decentralize Auth Case Study: IPNS 🧑💻

UCAN Decentralize Auth Case Study: IPNS 🔑 🧑💻

UCAN Decentralize Auth Case Study: IPNS 🔑 🧑💻 🤵 🧕 👨🌾

UCAN Decentralize Auth Case Study: Apps 🤵 🧕 👨🌾

UCAN Decentralize Auth Capabilities 101 🎟

Capabilities 101 🎟 Auth Models

Capabilities 101 🎟 Auth Models ACLs 📑 Designed for sharing a terminal (one) 👩🎤 👮 ✋ ⚙

Capabilities 101 🎟 Auth Models ACLs 📑 Designed for sharing a terminal (one) 👩🎤 👮 ✋ ⚙ Caps 👩🎤 🎟 ⚙ Designed for networking (many)

Capabilities 101 🎟 ACLs: Stateful Auth

Capabilities 101 🎟 ACLs: Stateful Auth 🧑🌾

Capabilities 101 🎟 ACLs: Stateful Auth 🧑🌾 ⚙

Capabilities 101 🎟 ACLs: Stateful Auth 🧑🌾 💂 ✋ ⚙

Capabilities 101 🎟 ACLs: Stateful Auth 🧑🌾 📑 💂 ✋ ⚙

Capabilities 101 🎟 ACLs: Stateful Auth 🧑🌾 📑 💂 ✋ Not in control ⚙

Capabilities 101 🎟 ACLs: Stateful Auth 📑 In control 🧑🌾 💂 ✋ Not in control ⚙

Capabilities 101 🎟 ACLs: Stateful Auth 📑 💂 ✋ In control 🧑🌾 💂 ✋ Not in control ⚙

Capabilities 101 🎟 PSA: ACLs Don’t CRDT Well

Capabilities 101 🎟 PSA: ACLs Don’t CRDT Well 🐉

Capabilities 101 🎟 Caps: Stateless Auth

Capabilities 101 🎟 Caps: Stateless Auth 🕵

Capabilities 101 🎟 Caps: Stateless Auth 🕵 ⚙

Capabilities 101 🎟 Caps: Stateless Auth 🕵 🗺 Addr ⚙

Capabilities 101 🎟 Caps: Stateless Auth 🕵 🗺 Addr 🎟 ⚙

Capabilities 101 🎟 Caps: Stateless Auth 🕵 🗺 Addr In control 🎟 ⚙

Capabilities 101 🎟 Caps: Stateless Auth 🕵 🗺 Addr In control 🎟 ⚙ All req info

Capabilities 101 🎟 Caps: Stateless Auth 🕵 🗺 Addr 🎟 ⚙

Capabilities 101 🎟 Caps: Stateless Auth 🕵 🎟 🗺 🎟 🎟 Addr ⚙

Capabilities 101 🎟 Caps: Stateless Auth 🕵 🗺 Addr 🎟 ⚙

Capabilities 101 🎟 Caps: Stateless Auth 🕵 🗺 Addr 🎟 👨🎨 ⚙

Capabilities 101 🎟 Caps: Stateless Auth 🕵 🗺 Addr 🎟 🎟 👨🎨 ⚙

Capabilities 101 🎟 Caps: Stateless Auth 🕵 🗺 Addr 🎟 🎟 👨🎨 ⚙ 🎟

Capabilities 101 🎟 Composition — “Amplification”

Capabilities 101 🎟 Composition — “Amplification” 🥫 ✂

Capabilities 101 🎟 Composition — “Amplification” 🥫 ✨ ✂

Capabilities 101 🎟 Composition — “Amplification” 🥫 ✨ 🥘 ✂

Capabilities 101 🎟 Auth Should be Boring!

UCAN Decentralize Auth Under the Microscope 🔬

Under the Microscope 🔬 “Who” vs “What”

Under the Microscope 🔬 “Who” vs “What” DIDs say who you are

Under the Microscope 🔬 “Who” vs “What” DIDs say who you are UCANs show what you can do

Under the Microscope 🔬 “Who” vs “What” AuthN DIDs say who you are UCANs show what you can do AuthZ

Under the Microscope 🔬 Teaser Token

Under the Microscope 🔬 JWT → UCAN

Under the Microscope 🔬 JWT → UCAN Header Payload Signature

Under the Microscope 🔬 JWT → UCAN Header Payload ✅ Signature

Under the Microscope 🔬 Anatomy of a Capability

Under the Microscope 🔬 Anatomy of a Capability Resource / “noun”

Under the Microscope 🔬 Anatomy of a Capability Resource / “noun” Action / “verb”

Under the Microscope 🔬 Anatomy of a Capability Resource / “noun” Action / “verb” Extensible fields

Under the Microscope 🔬 Stop 👏 Moving 👏 Keys 👏

Under the Microscope 🔬 Attenuation

Under the Microscope 🔬 Attenuation 👩💻

Under the Microscope 🔬 Attenuation 👩💻 🌈 🐶 🍬 🍾 🧸

Under the Microscope 🔬 Attenuation 👩💻 🌈 🐶 🍬 🍾 🧸 👨🦳🖥

Under the Microscope 🔬 Attenuation 👩💻 👨🦳🖥 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🍬 🍾 🧸

Under the Microscope 🔬 Attenuation 👩💻 👨🦳🖥 👨🦳📱 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🧸

Under the Microscope 🔬 Attenuation 👩💻 👨🦳🖥 👨🦳📱 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🧸 👩🚀 🐶

Under the Microscope 🔬 Attenuation 👩💻 👨🦳🖥 👨🦳📱 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🌈 🍾 🧸 👨🎨 🧸 👩🚀 🐶

Under the Microscope 🔬 Attenuation 👩💻 👨🦳🖥 👨🦳📱 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🌈 🌈 🧸 🍾 🧸 👨🎨 ☁⚙ 👩🚀 🐶

Under the Microscope 🔬 Attenuation 👩💻 👨🦳🖥 👨🦳📱 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🌈 🌈 👩🚀 🐶 🧸 🌈 🐶 🍾 🧸 👨🎨 ☁⚙ 💃

Under the Microscope 🔬 Attenuation 👩💻 👨🦳🖥 👨🦳📱 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🌈 🌈 Zero Coordination ✅ 📊 👩🚀 🐶 🧸 🌈 🐶 🔬 🍾 🧸 👨🎨 🐦 ☁⚙ 💃

Under the Microscope 🔬 Revocation Cascade 👩💻 👨🦳🖥 👨🦳📱 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🌈 🌈 👩🚀 🐶 🧸 🌈 🐶 🍾 🧸 👨🎨 ☁⚙ 💃

Under the Microscope 🔬 Revocation Cascade UCAN Hash 👩💻 👨🦳🖥 👨🦳📱 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🍬 🍾 🧸 🌈 🐶 🌈 🌈 👩🚀 🐶 🧸 🌈 🐶 🍾 🧸 👨🎨 ☁⚙ 💃

Under the Microscope 🔬 Composable Standard Library

Under the Microscope 🔬 Composable Standard Library Resource (URI) https: mailto: file: wnfs: dns: news: Ability (Cap) crud/create crud/read crud/update crud/destroy msg/send msg/receive group/ban group/join

Under the Microscope 🔬 ucan-ipld & CACAO

Under the Microscope 🔬 ucan-ipld & CACAO github.com/ucan-wg/ucan-ipld

UCAN Decentralize Auth Solving the Case Study 🕵

Solving the Case Study 🕵 Case Study: IPNS 🔑 🧑💻 🤵 🧕 👨🌾

Solving the Case Study 🕵 Case Study: NNS 🧑💻 🤵 🧕 👨🌾

Solving the Case Study 🕵 Case Study: NNS 🧑💻 🧾 🤵 🧕 👨🌾

Solving the Case Study 🕵 Case Study: NNS 🧑💻 @alice set: foo 🤵 🧾 🧕 👨🌾

Solving the Case Study 🕵 Case Study: NNS @alice set: foo @alice set: foo 🧑💻 @alice set: foo 🤵 🧾 🧕 @alice set: foo 👨🌾 @alice set: foo

Solving the Case Study 🕵 Case Study: NNS @alice set: foo @alice set: foo 🧑💻 @alice set: foo 🤵 🧾 🧕 @alice set: foo Delegate 👨🌾 @alice set: foo

Solving the Case Study 🕵 Authorised Data Retrieval 💂 👨🌾

Solving the Case Study 🕵 Authorised Data Retrieval 💂 @bob get: @alice/photos 👨🌾

Solving the Case Study 🕵 User Controlled Apps: IPFS ❤ UCAN

Solving the Case Study 🕵 AWAKE: Authorised Channels

Solving the Case Study 🕵 Distributed Invocation Receipt Invocation f ff Arguments Results Scheduling Con ig, etc E ects

UCAN Decentralize Auth Resources 📚

Resources 📚 Further Reading

Resources 📚 Further Reading Community: https://github.com/ucan-wg

Resources 📚 Further Reading Community: https://github.com/ucan-wg Capability Myths Demolished: https://srl.cs.jhu.edu/pubs/SRL2003-02.pdf

Resources 📚 Further Reading Community: https://github.com/ucan-wg Capability Myths Demolished: https://srl.cs.jhu.edu/pubs/SRL2003-02.pdf ACLs Don’t: http://waterken.sourceforge.net/aclsdont/current.pdf

Resources 📚 Further Reading Community: https://github.com/ucan-wg Capability Myths Demolished: https://srl.cs.jhu.edu/pubs/SRL2003-02.pdf ACLs Don’t: http://waterken.sourceforge.net/aclsdont/current.pdf ERights: https://erights.org

Resources 📚 Further Reading Community: https://github.com/ucan-wg Capability Myths Demolished: https://srl.cs.jhu.edu/pubs/SRL2003-02.pdf ACLs Don’t: http://waterken.sourceforge.net/aclsdont/current.pdf ERights: https://erights.org SPKI: https://theworld.com/~cme/html/spki.html

Resources 📚 UCAN Adventure

Resources 📚 ucan.xyz — Online Explorer / Validator

ucan.xyz github.com/ucan-wg lu.ma/wecan 🎉 þank you, IPFS þing 🇧🇪 brooklyn@fission.codes discord.gg/fissioncodes github.com/expede

a h I i t s e v ! s r e ck ucan.xyz github.com/ucan-wg lu.ma/wecan 🎉 þank you, IPFS þing 🇧🇪 brooklyn@fission.codes discord.gg/fissioncodes github.com/expede